PREVENTING THE UNWANTED EXTERNAL DETECTION OP OPERATIONS It 

DIGITAL INTEGRATED CIRCUITS 

BACKGOUND OF THE INVENTION 
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Cross-Refere nce to Related Application: 
This application is a continuation of copending 
International Application No. PCT/EP02/05428, filed May 16, 
2002, which designated the United States and was not 
10 published in English. 



1. Field of the invention: 

The present invention relates to a method of preventing the 
external detection of operations in a digital integrated 

15 circuit and to a digital integrated circuit in which the • 
unwanted external detection of operations within the 
digital integrated circuit is prevented. The present 
invention especially relates to a countermeasure for so- 
called side channel attacks, as are performed for analyzing 

20 digital integrated circuits. 

2. Description of the related art: 

x In many digital integrated circuits, unauthorized persons 
must be prevented from analyzing the mode of operation of 
25 same. Exemplary circuits in which such attack scenarios are 
to be warded off are chip card ICs, safety ICs or even 
individual circuit modules of such ICs, such as, for 
example, cryptocoprocessors . It need not be explained that 
unauthorized persons must be prevented from analyzing 
coding algorithms performed by a cryptocoprocessor . 

Typical attack scenarios with which unauthorized persons, 
for example, try to analyze coding algorithms carried out 
by a cryptocoprocessor are referred to as so-called side 
35 channel attacks. Such side channel attacks include, for 

example, the differential power consumption analysis (DPA = 
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differential power analysis), the detection of electro- 
magnetic radiation of the IC concerned and so-called timing 
attacks . 
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In contrast to synchronous circuits, asynchronous circuits, 
among which self-timed circuits are, have the advantageous' 
feature that the processing of same is not directly 
correlated to a time -periodic event, such as the clock. 
Thus, the processing of same does not show any dependency 
on such a time-periodic event, whereby it is more difficult 
in the asynchronous circuits to successfully perform side 
channel attacks. However, even in asynchronous circuits, 
the number of switching elements is generally dependent on 
the special operation to be processed, so that in general 
processing data dependencies which are reflected in the 
profile of the power consumption of the circuit concerned 
occur. 

In order to make such attacks more difficult, it is known 
to insert so-called random wait states into the process 
flow. It is also known to force interruptions in the 
execution of operations in the CPU. In the insertion of 
random wait states, possible variations of the timing of 
operations are limited, since a delay cannot be activated 
25 or a wait state cannot be inserted at any time. Even the 
measure of interrupting the execution in the CPU cannot 
completely block side channel attacks, since such 
interruptions can be detected by the varying power 
consumption. 
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SUMMARY OF THE INVENTION 



It is the object of the present invention to provide a 
35 method of preventing the external detection of operations 
in a digital integrated circuit comprising an asynchronous 
circuit. 
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Another object of the present invention is to develop a 
digital integrated circuit having an asynchronous circuit 
in such a way that the unwanted external detection of 
5 operations in the digital circuit is prevented. 

In accordance with a first aspect, the present invention 
provides a method of preventing the external detection of 
operations in a digital integrated circuit having an 
10 asynchronous circuit, having the method step of time- 
varying a supply voltage of the asynchronous circuit to 
time-shift the execution time of operations within the 
asynchronous circuit. 

15 In accordance with a second aspect, the present invention 
provides a digital integrated circuit having an 
asynchronous circuit, and means for time-varying a supply 
voltage of the asynchronous circuit to time-shift the 
execution point of operations within the asynchronous 

20 circuit. 

In other words, the invention provides a method of 
preventing the external detection of operations in an 
integrated circuit comprising an asynchronous circuit, 
25 comprising the method step of time-varying a supply voltage 
of the asynchronous circuit to shift the time of execution 
of operations within the asynchronous circuit in time. In a 
preferred aspect of the invention, this variation of the 
supply voltage takes place in a random way. 

30 

The invention is based on the finding that a random time 
jitter in the execution times of the operations is obtained 
by superimposing a randomly-controlled, that is 
unpredictable, time jitter on the supply voltage, whereby 
35 an artificial synchronizing of the individual measurements 
in the side channel attack is prevented. The time jitter in 
the execution of the operations within the asynchronous 
circuit, however, does not lead to processing errors since, 
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according to their nature, asynchronous circuits effect an 
auto-synchronization. 

According to a device aspect of the invention, the digital 
5 integrated circuit includes an asynchronous circuit and a 
means for time-varying the supply voltage with which the 
asynchronous circuit is supplied, whereby the execution 
time of operations within the asynchronous circuit is time- 
shifted. 

BRIEF DESCRIPTION OF THE DRAWINGS 

In the following, a preferred embodiment of the present 
15 invention will be detailed referring to the enclosed 
drawing. 

The one and only Figure shows a block diagram of a digital 
integrated circuit according to a preferred embodiment of 
20 the invention. 



DESCRIPTION OF THE PREFERRED EMBODIMENTS 

25 The inventive digital integrated circuit in its entirety 
referred to with the reference numeral 1 includes an 
asynchronous circuit 2, a generator circuit 3 for 
generating true random numbers (true random number 
generator) , a digital-analog converter 4 to which, on the 

30 input side, digital random numbers produced by the 

generator circuit are fed and which, on the output side, 
produces a corresponding analog target voltage value, and a 
voltage regulator 5 to which, on the input side, the analog 
target voltage value is fed from the digital-analog 

35 converter 4 and which, on the output side, generates an 
actual voltage value forming the supply voltage of the 
asynchronous circuit 2. The generator circuit 3 for 
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producing true random numbers, in turn, includes a noise 
source 6 generating a noise voltage and a random number 
generator 7 driven by the noise source 6. 

5 Instead of the combination of the noise source 6 and the 
random number generator 7 shown here, however, any other 
random generators can be used for generating the random 
numbers as input quantities for the digital-analog 
converter 4 . 

10 

In the preferred embodiment shown here, the voltage 
regulator 5 comprises a servo component 8, an actual value 
detection device 9 and a difference-forming device 10, to 
the inputs of which, on the one hand, the analog target 
15 voltage value from the digital-analog converter 4 and, on 
the other hand, an output signal from the actual value 
detection device 9 are fed. 

The generator circuit 3, the digital-analog converter 4 and 
20 the voltage regulator 5 together form a means for randomly 
time-varying the supply voltage or a means for 
superimposing a random time jitter on the supply voltage, 
with which the asynchronous circuit 2 is supplied, 
respectively. Due to the randomly varying supply voltage, 
25 there is a random time jitter in the execution of 

operations in the asynchronous circuit, whereby the 
artificial synchronizing of the individual measurements in 
the so-called side channel attacks is prevented or, at 
least, made more difficult. 
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While this invention has been described in terms of several 
preferred embodiments, there are alterations, permutations, 
and equivalents which fall within the scope of this 
invention. It should also be noted that there are many 
35 alternative ways of implementing the methods and 

compositions of the present invention. It is therefore 
intended that the following appended claims be interpreted 
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as including all such alterations, permutations, and 
equivalents as fall within the true spirit and scope of the 
present invention. 



